Privacy Policy

Bukku's privacy covers how we manage our customers' data.


Nukleus Ventures Sdn Bhd (“we”, “Nukleus”) takes your privacy very seriously. Please read this privacy policy (the “Policy”) carefully as it contains important information about what to expect when we collect information from you and how we will use your data.

By accessing our website at (the “Website”), using Bukku Online, Bukku Mobile and any other related services (Collectively “Service” or “Bukku”), you consent to the terms outlined in this Policy and the Terms of Service, you also agree to be bound by the terms.

Information collected from you

The Service collects and stores your personal information as well as information related to your businesses. Information that maybe collected includes (but not limited to) individual’s name, email address, phone number, profile picture, logo, physical addresses, your business’ particulars, taxation, accounting and financial information.

You can choose not to disclose your information to Nukleus by not using the Service.

Information about others from you

The Service may also collect information about other individuals and businesses (such as your employees, customers, suppliers) as you use the Service. You must ensure that you are authorised disclose the information to Nukleus. Nukleus may collect, use and disclose such information for the purposes described in this Policy, without taking additional steps required by privacy or data protection laws.

You are required to take reasonable steps to ensure that the parties concerned are aware of the Policy, and agrees to the matters highlighted in it, including their information collected, the purposes, the intended recipients, the party’s right to obtain access to the information.

The use of information collected

Nukleus collects information from you so that we can provide the Service for you to manage your business more efficiently and any other related services that you may request. The information collected may also be used for the purposes related to the Service including:

  • verify your business’ identity,
  • administer the Service,
  • carry out marketing and training related to the Service,
  • notify you of updates related to the Service,
  • assist to resolve technical or other issues related to the Service (Read Note 1),
  • comply with laws and regulations in applicable jurisdictions,
  • communicate with you.

Note 1: Sensitive financial data of your business hosted on Nukleus’ servers strictly belongs to you (The legal owner of such data), access to the data by Nukleus is strictly prohibited unless for support and service maintenance purpose.

By using the Service, You agree to the information being collected, held and used in the ways listed above and for any other use you may authorise. Nukleus will only use your information for the purposes described in this Policy or with your explicit permission otherwise.

It is however your responsibility to keep your password to the Service safe. You should notify us as soon as possible if you become aware of any misuse of your password or you believe the security has been compromised. You should immediately change your password in the Service whenever possible.

Data aggregation

By using the Service, You agree that Nukleus can access, aggregate and use non-personally identifiable data we have collected. Nukleus may use the aggregated non-personally identifiable data to:

  • better understand how our customers are using the Service,
  • improve the Service,
  • create useful business insights / benchmarks.

The location of information stored

The information is collected and stored on servers located in data centres operated by reputable 3rd parties (Amazon’s Web Services). The data centres are located in Singapore. Your information will be transferred to Singapore if you are accessing from outside of Singapore.

By using the Service, you consent to that information being hosted on servers located in Singapore. The information stored with us remain within Nukleus’ control at all times. Hosting provider’s role is limited to providing a hosting and storage service to Nukleus, and we ensure that our hosting providers do not have access to, and use the necessary level of protection for, your information with us.

We protect your information

Nukleus takes all reasonable precautions to protect your information from unauthorised access, modification or disclosure. Your personal information is stored on secure servers that have SSL Certificates issued by leading certificate authorities, and all Data transferred between your machine and our servers is always encrypted.

However, the Internet is not in itself a secure environment and we cannot give an absolute assurance that your information will be secure at all times. Transmission of personal information over the Internet is at your own risk. You should only enter personal information to the Service within a secure environment.

We will advise you at the first reasonable opportunity upon discovering or being advised of a security breach where your information is lost, stolen, accessed, used, disclosed, copied, modified, or disposed of by any unauthorised persons or in any unauthorised manner.

Disclosure of your information

Nukleus will not disclose your information to any 3rd party without your express consent. However, you should be aware that we may be required to disclose your information without your consent in order to comply with any court orders, legal process or investigation including by tax authorities, if such disclosure is required by law. We will notify you if we are required by law to disclose your information whenever possible.

Your credit card / payment information

We do not store and have no access to your credit card or payment information. Your credit card details are encrypted and securely stored by a payment gateway appointed by us, enabling us to automatically bill your credit card on a recurring basis.

Access to your information

It is your responsibility to ensure that the information you provide to us is accurate and up-to-date. You may request access to the information we hold about you, by setting out your request in writing and sending it to us at

Nukleus will process your request as soon as reasonably possible, provided we are not prevented from doing so on legal grounds. If we are unable to meet your request, we will let you know of the reasons.

The use of cookies

In providing the Service, Nukleus utilises cookies. A cookie is a text file stored on your computer for record-keeping purposes. A cookie does not identify you personally or contain any other information about you but it does identify your computer.

We and some of our affiliates and third-party service providers may use a combination of “persistent cookies” (cookies that remain on your computer storage for an extended period of time) and “session cookies” (cookies that was removed as you close your browser) on the Website and/or Service to, for example, track overall site usage, and track and report on your use and interaction with ad impressions and ad services.

You can set your browser to reject the use of cookies. However, you should note that refusing cookies may have a negative impact on the functionality and usability of the Website / Service.

Making a privacy complaint

If you wish to complain about how we have handled your information, please provide us with the full details of your complaint and any supporting documents to

Changes to the Policy

Nukleus reserves the right to change this Policy at any time, and any amended Policy is effective upon posting to this Website. Nukleus will make every effort to communicate significant changes to you via email or other means. Your continued use of the Service will be deemed acceptance of any amended Policy.

Last updated: 04 March 2020.